3764 matches found
Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CNVD-2023-93339)
Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A cross-site scripting vulnerability exists in Cisco Prime Infrastructure that stems from insufficient validation of user-supplied input and can be exploited ...
Denial Of Service (DoS)
phpseclib/phpseclib is vulnerable to Denial Of Service DoS. The vulnerability exists because of an infinite loop when the prime number field is a composite number, which allows an attacker to crash the application...
CVE-2023-20069
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...
CVE-2023-20069
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...
Cisco Prime Infrastructure 跨站脚本漏洞
Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A cross-site scripting vulnerability exists in Cisco Prime Infrastructure that stems from insufficient validation of user-supplied input and can be exploited ...
Terrafrost phpseclib 安全漏洞
Terrafrost phpseclib is a Terrafrost open source application. pure PHP implementation under the MIT license. A security vulnerability exists in Terrafrost phpseclib version 2.0.41 and earlier versions, which originates from an infinite loop with a compound prime field in the Math/PrimeField.php...
CVE-2023-20069 Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...
CVE-2023-20069
Cisco CVE-2023-20069 affects the web-based management interfaces of Cisco Prime Infrastructure and Cisco EPN Manager. The vulnerability is due to insufficient validation of user-supplied input, enabling authenticated users to lure others into a crafted link that could trigger stored XSS in the af...
CVE-2023-20069: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...
Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...
CVE-2023-20069
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...
PT-2023-2108 · Cisco · Cisco Evolved Programmable Network (Epn) Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network EPN Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote...
PT-2023-5290 · Intel · Intel Quartus Prime Pro Edition
Name of the Vulnerable Software and Affected Versions: Intel Quartus Prime Pro Edition for linux versions prior to 22.4 Description: The issue is related to the use of insufficiently random values in some Intel Agilex software, which is part of Intel Quartus Prime Pro Edition for linux. This may...
Fake Amazon Prime email abuses LinkedIn's URL shortener
Over the last few days, scammers have been sending out phishing mails that disguise bogus URLs with something called Slinks--shortened Linkedin URLs. The shortened URLs redirect users to a different URL when they are clicked. If youve ever seen a Tiny URL, or a Bit.ly link, youll already be...
K20031768: Intel hardware vulnerabilities CVE-2020-8737 CVE-2020-12312
Security Advisory Description CVE-2020-8737 Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure v...
K33245306: INTEL-SA-00244 - Intel Quartus Prime Software CVE-2019-0171
Security Advisory Description Improper directory permissions in the installer for IntelR QuartusR software may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2019-0171 Impact There is no impact; F5 products are not affected by this vulnerability...
K64009378: OpenSSL vulnerability CVE-2016-0701
Security Advisory Description The DHcheckpubkey function in crypto/dh/dhcheck.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman DH key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple...
CVE-2022-37329
Uncontrolled search path in some IntelR QuartusR Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-34157
Improper access control in the IntelR FPGA SDK for OpenCLTM with IntelR QuartusR Prime Pro Edition software before version 22.1 may allow authenticated user to potentially enable escalation of privilege via local access...